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SECURE REMOTE MIRRORING 


ABSTRACT OF THE DISCLOSURE 

5 One embodiment disclosed relates to a method for remote 

mirroring of network traffic. A data packet to be remotely mirrored is received by 
an entry device. The entry device is pre-configured with a destination address to 
which to mirror the data packet. The packet to be mirrored is encrypted. An 
encapsulating header is generated and added to encapsulate the encrypted 

10 packet. The encapsulating header includes the aforementioned destination 
address. The encapsulated packet is forwarded to an exit device associated 
with the destination address, where the packet may be decapsulated, and then 
decrypted, before being sent out of a port. In another embodiment, the entry and 
exit devices are remotely configured with encryption and decryption keys, 

15 respectively. 
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